Sql injection

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/inquiries/viewdetails.php...

CVE-2022-33059

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletetrain...

CVE-2022-33059

CVE-2022-33059 affects Online Railway Reservation System v1.0. A SQL injection vulnerability exists via the id parameter in /classes/Master.php?f=delete_train, enabling potentially unauthorized database access. The issue is documented across multiple feeds (NVD, Red Hat, CNVD, CVE listings). No e...

CVE-2022-33058

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletemessage...

CVE-2022-33058

CVE-2022-33058 affects Online Railway Reservation System v1.0. The vulnerability is a SQL injection via the id parameter in /classes/Master.php?f=delete_message, caused by unsafe SQL handling in that path. Initial data provides CVSS metrics (2.0: 6.5; 3.1: 7.2) indicating exploitable network acce...

CVE-2022-33057

CVE-2022-33057 affects SourceCodester Online Railway Reservation System v1.0, where a SQL injection vulnerability exists in the id parameter of /classes/Master.php?f=delete_reservation. The vulnerability arises from improper handling of user-supplied input, enabling potential manipulation of the ...

CVE-2022-33057

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletereservation...

CVE-2022-33042

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/inquiries/viewdetails.php...

CVE-2022-33042

The connected records provide concrete details for CVE-2022-33042: Online Railway Reservation System v1.0 contains a SQL injection vulnerability in the admin/inquiries/view_details.php endpoint, triggered by the id parameter. The root cause is unsafe handling of user-supplied input in this parame...

Online Railway Reservation System SQL注入漏洞

Sourcecodester Online Railway Reservation system is a web-based application that provides an online platform for rail or train station passengers or potential passengers to browse their schedules and reserve seats. sourceCodester Online Railway Reservation System v1.0 is vulnerable to a SQL...

CVE-2022-33049

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/?page=user/manageuser...

CVE-2022-33056

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/schedules/manageschedule.php...

CVE-2022-33049

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/?page=user/manageuser...

CVE-2022-33055

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/trains/managetrain.php...

CVE-2022-33055

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/trains/managetrain.php...

CVE-2022-33056

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/schedules/manageschedule.php...

CVE-2022-33048

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/reservations/viewdetails.php...

Sql injection

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/trains/managetrain.php...

Sql injection

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/?page=user/manageuser...

Sql injection

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/schedules/manageschedule.php...